Adversary Intelligence — 2026-04-16

Two US Nationals Sentenced to 108 and 92 Months for Running DPRK Laptop Farms That Funneled $5M to Pyongyang

DOJ announced sentencing of Kejia Wang (108 months) and Zhenxing Wang (92 months) for operating laptop farms and shell companies that enabled North Korean IT workers to pose as US residents, obtaining employment at more than 100 US companies using at least 80 stolen American identities. The scheme generated over $5 million for the DPRK. Concurrent with the sentencing, the State Department Rewards for Justice program offered up to $5 million for information disrupting the DPRK revenue mechanism. FBI and HSI led the investigation; the case is the highest-value laptop farm prosecution to date and establishes enhanced guideline exposure for facilitators.

Analysis
The sentencing shifts the laptop-farm prosecution calculus: US-person co-conspirators can no longer treat mid-range sentences as the likely outcome, and cooperation incentives rise materially. The concurrent Rewards for Justice $5 million posting, corroborated across DOJ, TechCrunch, and BleepingComputer, signals State is prioritizing financial-disruption leads over indictment volume, consistent with OFAC's same-week Shamkhani action pattern. Cooperator statements from the Wangs make a follow-on wave of indictments against Fortune employers likely next quarter, and at least one Rewards-sourced arrest of an overseas facilitator is probable within six months; operators in the crypto-theft ecosystem may nonetheless absorb 8-9 year exposure as cost of doing business, leaving deterrence blunted regardless of sentence length.

3 sources

Two U.S. Nationals Sentenced for Facilitating Fraudulent Remote Information Technology Worker Scheme - US Department of Justice
Two Americans sentenced for helping North Korea steal $5 million in fake IT worker scheme - TechCrunch
US nationals behind DPRK IT worker laptop farm sent to prison - BleepingComputer